@docupace/pipeline 1.0.23 → 1.0.24-alpha-3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@docupace/pipeline",
-  "version": "1.0.23",
+  "version": "1.0.24-alpha-3",
   "description": "",
   "main": "index.js",
   "type": "module",
@@ -17,7 +17,6 @@
   "dependencies": {
     "@changesets/cli": "^2.27.10",
     "@docupace/core-client": "^0.1.59",
-    "auth0-deploy-cli": "^7.24.3",
     "axios": "^1.7.9",
     "commander": "^12.1.0",
     "dotenv": "^16.4.7",

package/src/auth0/cli.js

@@ -18,17 +18,18 @@ dotenv.config({ path: ['.env.pipeline.local', 'config/.env.pipeline.local'] });
 const program = new Command();
 
 program
-    .command('configureFromSite <fromSite> <toSite> <fromEnv> <toEnv> <deployUI> <deployGraphQLServer> <useNewDomain> <configureMFA>')
+    .command('configureFromSite <fromSite> <toSite> <fromEnv> <toEnv> <deployUI> <deployGraphQLServer> <useNewDomain>')
     .description('Configure the Auth0 tenants in env for the given site')
-    .action(async (fromSite, toSite, fromEnv,toEnv, deployUI, deployGraphQLServer, useNewDomain, configureMFA) => {
-        await configureFromSite(fromSite, toSite, fromEnv, toEnv, deployUI, deployGraphQLServer, useNewDomain, configureMFA);
+    .action(async (fromSite, toSite, fromEnv,toEnv, deployUI, deployGraphQLServer, useNewDomain) => {
+        await configureFromSite(fromSite, toSite, fromEnv, toEnv, deployUI, deployGraphQLServer, useNewDomain);
     });
 
 program
   .command('getVaultSecrets <vaultPath>')
   .description('Get Secrets for Vault PATH')
   .action(async (vaultPath) => {
-    await getVaultSecrets(vaultPath);
+    const data = await getVaultSecrets(vaultPath);
+    console.log(JSON.stringify(data, 'null', 2));
   });
 
 program

package/src/auth0/configure.js

@@ -2,7 +2,6 @@ import fs from 'fs';
 import path from 'path';
 import axios from 'axios';
 import crypto from 'crypto';
-import { deploy } from 'auth0-deploy-cli';
 import fl from 'fs/promises';
 
 import {
@@ -54,297 +53,6 @@ async function copyDirectory(source, destination) {
   }
 }
 
-async function addApplicationToApi ({application, auth0Domain, auth0AuthToken, coreApiIdentifier}){
-  console.log("Adding application to API authorized applications...");
-
-  try {
-    const auth0Response = await axios.get(`https://${auth0Domain}/api/v2/clients`, {
-      headers: {authorization: `Bearer ${auth0AuthToken}`},
-    });
-
-    const appAuth0ClientIdData = auth0Response.data.find(client => client.name === `${application}`);
-    const appAuth0ClientId = appAuth0ClientIdData.client_id;
-
-    await axios.post(
-          `https://${auth0Domain}/api/v2/client-grants`,
-      {
-        client_id: appAuth0ClientId,
-        audience: `${coreApiIdentifier}`,
-        scope: [],
-      },
-      {
-        headers: {
-          Authorization: `Bearer ${auth0AuthToken}`,
-          "Content-Type": "application/json",
-        },
-      }
-    );
-    console.log(`Application (${appAuth0ClientId}) authorized for API: ${coreApiIdentifier}`);
-  } catch (err) {
-    console.error(`Failed to add application: ${application}: ${err.message}`);
-  }
-
-}
-
-async function initializeAuth0Configuration({
-                                              initConfiguration,
-                                              auth0Domain,
-                                              auth0AuthToken,
-                                              coreApiIdentifier,
-                                            }) {
-  if (initConfiguration === "true") {
-    try {
-      // Create a new resource server in Auth0
-      console.log("Creating resource server in Auth0...");
-
-      const resourceServerResponse = await axios.post(
-        `https://${auth0Domain}/api/v2/resource-servers`,
-        {
-          name: "docupace-core",
-          identifier: `${coreApiIdentifier}`,
-          token_lifetime: 86400,
-          allow_offline_access: false,
-          signing_alg: "RS256",
-          skip_consent_for_verifiable_first_party_clients: true,
-          scopes: [],
-        },
-        {
-          headers: {
-            Authorization: `Bearer ${auth0AuthToken}`,
-            "Content-Type": "application/json",
-          },
-        }
-      );
-
-      const apiId = resourceServerResponse.data.id;
-
-      // Update tenant settings with the default audience
-      console.log("Updating tenant settings...");
-      await axios.patch(
-        `https://${auth0Domain}/api/v2/tenants/settings`,
-        {
-          default_audience: `${coreApiIdentifier}`,
-        },
-        {
-          headers: {
-            Authorization: `Bearer ${auth0AuthToken}`,
-            "Content-Type": "application/json",
-          },
-        }
-      );
-      console.log("Tenant settings updated successfully.");
-    } catch (error) {
-      console.error("Error during Auth0 configuration:", error.response?.data || error.message);
-    }
-  }
-}
-
-async function importAuth0Templates(directoryPath, auth0Domain, auth0ClientID, auth0ClientSecret) {
-  try {
-    const config = {
-      input_file: directoryPath,
-      config: {
-        AUTH0_DOMAIN: auth0Domain,
-        AUTH0_CLIENT_ID: auth0ClientID,
-        AUTH0_CLIENT_SECRET: auth0ClientSecret,
-      },
-      debug: true,
-    };
-
-    console.log('Starting Auth0 template import...');
-    await deploy(config);
-    console.log('Auth0 template import completed successfully!');
-  } catch (error) {
-    console.error('Error during Auth0 template import:', error.message);
-    process.exit(1); // Exit with an error code
-  }
-}
-
-async function updateJsonFile(filePath, updates) {
-  const content = await fs.promises.readFile(filePath, 'utf8');
-  const jsonContent = JSON.parse(content);
-  const updatedContent = JSON.stringify({...jsonContent, ...updates}, null, 2);
-  await fs.promises.writeFile(filePath, updatedContent);
-}
-
-async function replaceInFile(filePath, replacements) {
-  let content = await fs.promises.readFile(filePath, 'utf8');
-
-  for (const [search, replace] of replacements) {
-    const escapedSearch = search.replace(/[-\/\\^$*+?.()|[\]{}]/g, '\\$&'); // Escape special chars
-    content = content.replace(new RegExp(escapedSearch, 'g'), replace);
-  }
-  await fs.promises.writeFile(filePath, content, 'utf8');
-}
-
-async function templateAuth0(siteUrl, coreApiContext, env, filePaths, deployUI, deployGraphQLServer, commonSecrets, configureMFA) {
-  try {
-    let uiAllowedCallbacksUrls,
-      uiAllowedLogoutUrls;
-    let graphqlAllowedCallbacksUrls,
-      graphqlAllowedLogoutUrls;
-    let connectAllowedCallbacksUrls,
-      connectlAllowedLogoutUrls;
-
-    let connectClientMetadata,
-        connectCallbacks,
-        connectAddons;
-    // Configure URLs based on environment
-    if (env === 'prd') {
-      uiAllowedCallbacksUrls = [`${siteUrl}/api/auth/callback`];
-      uiAllowedLogoutUrls = [`${siteUrl}`];
-
-      graphqlAllowedCallbacksUrls = [`${siteUrl}/api/graphql/callback`];
-      graphqlAllowedLogoutUrls = [`${siteUrl}/api/graphql/`];
-
-      connectAllowedCallbacksUrls = [`${siteUrl}/connect/samlCallback?client_name=auth0`];
-      connectlAllowedLogoutUrls = [ `${siteUrl}/connect`];
-    } else {
-      uiAllowedCallbacksUrls = [
-        `${siteUrl}/api/auth/callback`,
-        `http://localhost:3000/api/auth/callback`,
-      ];
-      uiAllowedLogoutUrls = [
-        `${siteUrl}`,
-        `http://localhost:3000`,
-      ];
-      graphqlAllowedCallbacksUrls = [
-        `${siteUrl}/api/graphql/callback`,
-        `http://localhost:4000/api/graphql/callback`,
-      ];
-      graphqlAllowedLogoutUrls = [
-        `http://localhost:4000/api/graphql/`,
-        `${siteUrl}/api/graphql/`,
-      ];
-      connectAllowedCallbacksUrls = [
-        `${siteUrl}/connect/samlCallback?client_name=auth0`,
-        `http://localhost:9000/connect/samlCallback?client_name=auth0`,
-      ];
-      connectlAllowedLogoutUrls = [
-        `${siteUrl}/connect`
-      ];
-
-      const siteUrlNoPrefix=siteUrl.replace(/^https?:\/\//, '');
-      connectClientMetadata ={
-        "docupaceContext" : "core",
-        "docupaceHost" : `${siteUrlNoPrefix}`,
-        "docupace_context" : "core",
-        "docupace_host" : `${siteUrlNoPrefix}  `
-      };
-
-      connectCallbacks = [
-        `${siteUrl}/connect/samlCallback?client_name=auth0`
-      ];
-
-      connectAddons = {
-        "samlp": {
-          "audience": `${siteUrl}/connect`,
-          "recipient": `${siteUrl}/connect/samlCallback?client_name=auth0`,
-          "destination": `${siteUrl}/connect/samlCallback?client_name=auth0`,
-          "nameIdentifierFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified",
-          "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST",
-          "nameIdentifierProbes": [
-            "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/docupace-username"
-          ],
-          "mappings": {
-            "proposalHandle": "ProposalHandle"
-          }
-        }
-      };
-
-    }
-
-
-    const configureUI = deployUI === 'true';
-    if (configureUI) {
-      console.log('ui_allowed_callbacks_urls ->', uiAllowedCallbacksUrls);
-      console.log('ui_allowed_logout_urls ->', uiAllowedLogoutUrls);
-
-      await updateJsonFile(filePaths.uiJson, {
-        callbacks: uiAllowedCallbacksUrls,
-        allowed_logout_urls: uiAllowedLogoutUrls,
-      });
-
-
-      //TODO: move to separate function for connect
-      console.log('connect_allowed_callbacks_urls ->', connectAllowedCallbacksUrls);
-      console.log('connect_allowed_logout_urls ->', connectlAllowedLogoutUrls);
-
-      // update allowed callback url
-      await updateJsonFile(filePaths.connectJson, {
-        callbacks: connectAllowedCallbacksUrls,
-        allowed_logout_urls: connectlAllowedLogoutUrls,
-        client_metadata: connectClientMetadata,
-        addons: connectAddons
-      });
-
-
-
-      console.log('Updated URLs for main UI...');
-    } else {
-      await fs.promises.unlink(filePaths.uiJson);
-      await updateJsonFile(filePaths.databaseJson, {
-        enabled_clients: (content) => content.enabled_clients.filter((client) => client !== 'docupace-ui-main'),
-      });
-      console.log("Removed 'docupace-ui-main' from enabled_clients in database.json");
-    }
-
-    const configureGraphqlServer = deployGraphQLServer === 'true';
-    if (configureGraphqlServer) {
-      console.log('graphql_allowed_callbacks_urls ->', graphqlAllowedCallbacksUrls);
-      console.log('graphql_allowed_logout_urls ->', graphqlAllowedLogoutUrls);
-
-      await updateJsonFile(filePaths.graphqlJson, {
-        callbacks: graphqlAllowedCallbacksUrls,
-        allowed_logout_urls: graphqlAllowedLogoutUrls,
-      });
-      console.log('Updated URLs for GraphQL server...');
-    } else {
-      await fs.promises.unlink(filePaths.graphqlJson);
-      await updateJsonFile(filePaths.databaseJson, {
-        enabled_clients: (content) => content.enabled_clients.filter((client) => client !== 'docupace-graphql'),
-      });
-      console.log("Removed 'docupace-graphql' from enabled_clients in database.json");
-    }
-
-    // TWILIO configuration
-    await replaceInFile(filePaths.twilioJson, [
-      ['twilioauthtokenplaceholder', commonSecrets.TWILIO_AUTH_TOKEN],
-      ['twiliosidplaceholder', commonSecrets.TWILIO_SID],
-      ['twiliofromplaceholder', commonSecrets.TWILIO_FROM_NUMBER],
-    ]);
-
-    console.log('TWILIO configuration updated...');
-
-    const tmpSiteUrl = siteUrl.replace(/^https?:\/\//, '');
-    // Database configuration
-    await replaceInFile(filePaths.databaseLoginJs, [
-      ['${docupaceHost}', tmpSiteUrl],
-      ['${docupaceContext}', coreApiContext],
-    ]);
-
-    console.log('MFA Template configuration started...');
-
-    try {
-      const sourceDir = configureMFA === 'DISABLED' ? 'auth0-site-setup/templateNoMFA/' : 'auth0-site-setup/templateMFA/';
-      const destinationDir = 'auth0-site-setup/template/';
-
-      console.log(`AUTH0 MFA is ${configureMFA === 'DISABLED' ? 'disabled' : 'enabled'}`);
-      await copyDirectory(sourceDir, destinationDir);
-
-      console.log('MFA configuration completed.');
-    } catch (err) {
-      console.error('Error configuring MFA:', err);
-      throw err;
-    }
-
-    console.log('Template configuration completed.');
-  } catch (err) {
-    // console.error('Error configuring Auth0 templates:', err);
-    throw err;
-  }
-}
-
 export async function getAuth0AuthToken(auth0Domain, clientId, clientSecret) {
   try {
     const response = await axios.post(`https://${auth0Domain}/oauth/token`, {
@@ -604,8 +312,7 @@ ingress:
   }
 }
 
-
-export async function configureFromSite(fromSite, toSite, fromEnv,toEnv, deployUI, deployGraphQLServer, useNewDomain, configureMFA) {
+export async function configureFromSite(fromSite, toSite, fromEnv,toEnv, deployUI, deployGraphQLServer, useNewDomain) {
   console.log(`Configuring Auth0 tenants and ArgoCD apps for site: ${toSite} in env: ${toEnv} from site: ${fromSite}`);
   // Common Secrets
   const commonSecretsPath = getVaultSecretsConfigs(toSite).commonSecretsPath;
@@ -633,17 +340,17 @@ export async function configureFromSite(fromSite, toSite, fromEnv,toEnv, deployU
   let repoPathFromEnv ="";
   let repoPathToEnv = "";
   // Clone repositories
-  if ( fromEnv == toEnv ) {
+  if ( fromEnv === toEnv ) {
      repoPathFromEnv = await cloneEnvRepository(fromEnv);
      repoPathToEnv = repoPathFromEnv;
-  }else {
+  } else {
      repoPathFromEnv = await cloneEnvRepository(fromEnv);
      repoPathToEnv = await cloneEnvRepository(toEnv);
   }
 
   //TODO: clone fromEnv and toEnv. replace above with this
 
-  const auth0RepoPath = await cloneRepository('auth0-site-setup');
+  // const auth0RepoPath = await cloneRepository('auth0-site-setup');
 
   // Read deploy configs
   const { deployConfig: deployUIConfig } = await readDeployConfig('ui', fromEnv, fromSite, 'values');
@@ -689,9 +396,6 @@ export async function configureFromSite(fromSite, toSite, fromEnv,toEnv, deployU
     CONNECT_URL = `${oldUrl}_ui`;
   }
 
-  await templateAuth0(SITE_HOST, CORE_API_CONTEXT, toEnv, filePaths, deployUI, deployGraphQLServer, commonSecrets, configureMFA);
-  await importAuth0Templates('./auth0-site-setup/template', auth0Domain, auth0ClientId, auth0ClientSecret);
-
   if (deployUI === 'true') {
     await configureUI(SITE_HOST, CORE_URL, DOCUPACE_HOST, toSite, toEnv, useNewDomain, auth0Domain, auth0ClientId, auth0ClientSecret, auth0Token, uiSecretsPath, uiImageTag, repoPathToEnv);
   }
@@ -699,17 +403,4 @@ export async function configureFromSite(fromSite, toSite, fromEnv,toEnv, deployU
   await configureGraphQLServer(SITE_HOST, CORE_URL, DOCUPACE_HOST, toSite, toEnv, auth0Domain, auth0ClientId, auth0ClientSecret, auth0Token, graphqlSecretsPath, graphqlImageTag, graphqlStandardConfigRemoteBranch, repoPathToEnv, commonSecrets);
   await pushDeployConfig(repoPathToEnv, `Config update for ${toSite} from ${fromSite} with UI: ${uiImageTag} and GraphQL: ${graphqlImageTag}`);
 
-  await initializeAuth0Configuration({
-    initConfiguration: "true",
-    auth0Domain: auth0Domain,
-    auth0AuthToken: auth0Token,
-    coreApiIdentifier: commonSecrets.CORE_API_IDENTIFIER,
-  });
-
-  await addApplicationToApi({
-    application: 'docupace-graphql-client-credentials',
-    auth0Domain: auth0Domain,
-    auth0AuthToken: auth0Token,
-    coreApiIdentifier: commonSecrets.CORE_API_IDENTIFIER
-  })
 }

package/src/next/connect.js

@@ -36,7 +36,7 @@ const connectUIEnvMap= {
 function log(msg) {
     console.log(`[*] ${msg}`);
   }
-  
+
   /* --------------------------------
    * 1. GIT CHECKOUT
    * -------------------------------- */
@@ -48,21 +48,16 @@ function log(msg) {
       await fs.remove(destDir);
       log(`Cloning ${destDir} repository...`);
     }
-    
+
     const username = process.env.BITBUCKET_USERNAME;
     const password = process.env.BITBUCKET_APP_PASSWORD;
-  
+
     // Construct clone command
     const cloneUrl = `https://${username}:${password}@bitbucket.org/dp-cloud/${repository}.git`;
-  
+
     log(`Perform cloning`);
     await $`git clone --branch=${branch} --depth 1 ${cloneUrl} ${destDir}`;
   }
-  
-  
-
-
-  
 
 export async function connectClone() {
      const connectFromEnv = connectUIEnvMap[process.env.BUILD_ENVIRONMENT];
@@ -78,8 +73,8 @@ export async function connectClone() {
       process.exit(1);
     }
     const siteCommonVaultPath = `secret/data/${site}/common/config`;
-  
-  
+
+
     // 2) getVaultSecrets
     const secretsJson = await getVaultSecrets(siteCommonVaultPath);
     if (!secretsJson.AUTH0_CLIENT_ID) {
@@ -87,12 +82,12 @@ export async function connectClone() {
       process.exit(1);
     }
     const siteCommonSecrets = secretsJson;
-  
+
     // 3) Export secrets as environment variables
     process.env.AUTH0_CLIENT_ID = siteCommonSecrets.AUTH0_CLIENT_ID;
     process.env.AUTH0_CLIENT_SECRET = siteCommonSecrets.AUTH0_CLIENT_SECRET;
-  
-   
+
+
     process.env.AUTH0_REGION_DOMAIN="us.auth0.com";
 
     log(`BUILD_ENVIRONMENT: ${connectToEnv}`);
@@ -100,16 +95,16 @@ export async function connectClone() {
     log(`AUTH0_SUBDOMAIN: ${process.env.AUTH0_SUBDOMAIN}`);
     log(`AUTH0_REGION_DOMAIN: ${process.env.AUTH0_REGION_DOMAIN}`);
     log(`AUTH0_CLIENT_ID: ${process.env.AUTH0_CLIENT_ID}`);
-  
+
     process.env.AUTH0_DOMAIN = `docupace-${process.env.BUILD_ENVIRONMENT}-${process.env.BUILD_SITE}.${process.env.AUTH0_REGION_DOMAIN}`;
-    
+
 
     const projectRoot = process.cwd();
     // 4) Clone 'connect-deploy' into CONNECT_DIR
 
-    
+
     await gitCheckout('connect-deploy', process.env.CONNECT_DIR);
-    
+
     await gitCheckout(`${connectToEnv}-site-settings`, `${process.env.CONNECT_DIR}/${connectToEnv}-site-settings`);
 
     // 5) Create site clone (emulating the dock.sh call)
@@ -121,8 +116,8 @@ export async function connectClone() {
       log('Clone template directory not found:');
       process.exit(1);
     }
-  
-  
+
+
     if (!(await fs.pathExists(cloneTo))) {
       log('New site does not exist. Performing cloning...');
 
@@ -144,13 +139,13 @@ export async function connectClone() {
             console.error('stderr:', error._stderr); // Standard error
         }
     })();
-    
-    
+
+
     } else {
       log('Site already exists. Continuing Auth0 setup...');
     }
-  
-    
+
+
     await (async () => {
       try {
           // Execute the shell command
@@ -173,7 +168,7 @@ export async function connectClone() {
     await $`ls -all ${path.join(cloneTo, 'conf')}`;
     await $`ls -all ${path.join(cloneTo, 'conf/saml')}`;
     await $`cat ${path.join(cloneTo, 'conf/saml/auth0.xml')}`;
-  
+
     // 8) Git add, commit, push
     await $`cd ${cloneTo} && git checkout master && git pull --ff-only`;
     await $`cd ${cloneTo} && git remote -v`;
@@ -181,11 +176,11 @@ export async function connectClone() {
     await $`cd ${cloneTo} && git status`;
     await $`cd ${cloneTo} && git add . ../sites.sh`;
     await $`cd ${cloneTo} && git status`;
-  
+
     const numChanges = (
       await $`cd ${cloneTo} && git diff-index HEAD`
     ).stdout.split('\n').filter(Boolean).length;
-  
+
     if (numChanges > 0) {
       const jiraTicket = process.env.JIRA_TICKET || 'NO_JIRA';
       const message = `${jiraTicket} usdoc-s-builui job download_auth0_metadata for ${connectToEnv}/${process.env.BUILD_SITE}`;
@@ -196,4 +191,4 @@ export async function connectClone() {
       log('No changes have been made. The site likely already has the correct configuration.');
     }
   }
-  
+